Grid User Setup

From Research IT

Follow the instructions below to begin to explore grid computing. In order for you to begin to run jobs on this dell cluster you need a user certificate.

Contents 1 Directions for obtaining a DOE Grid User Certificate: (ONLY DO THIS ONCE) 2 Copying DOE Certificate to our grid environment 3 Getting the tools into your path and creating a proxy certificate 4 If your proxy certificate has expired 5 Confirming your proxy certificate

Directions for obtaining a DOE Grid User Certificate: (ONLY DO THIS ONCE)

You need to request a user certificate.  Please follow the directions on NYS Grid User Instruction website
http://nysgrid.org/main/userinfo/index.maml
This process may take up to 5 days.  Once you have successfully retrieved a user certificate you can proceed with the following.

Copying DOE Certificate to our grid environment

You should have a cert.pfx (or cert.p12) on

Log on to athena.rit.albany.edu  (if you do not have an account contact ritgroup@albany.edu)
[ew2193@grid ~] mkdir $HOME/.globus
Upload (sftp) your cert.pfx (or cert.p12) to your home directory.

Getting the tools into your path and creating a proxy certificate

First you must source the directory where globus tools are run. You will need to know what shell you are using in order to source the correct setup file 'echo $SHELL'.

• Bash users: 'source /network/rit/misc/grid/setup.sh'
• Other shells: 'source /network/rit/misc/grid/setup.csh'

[ew2193@grid ~]$ source /network/rit/misc/grid/setup.csh
[ew2193@grid ~]$ openssl pkcs12 -in cert.pfx -clcerts -nokeys -out $HOME/.globus/usercert.pem
[ew2193@grid ~]$ openssl pkcs12 -in cert.pfx -nocerts -out $HOME/.globus/userkey.pem
[ew2193@grid ~]$ chmod 400 $HOME/.globus/userkey.pem
[ew2193@grid ~]$ grid-proxy-init
  Your identity: /DC=org/DC=doegrids/OU=People/CN=Eric Warnke 32390
  Enter GRID pass phrase for this identity: *******
  Creating proxy ............................................................ Done
  Your proxy is valid until: Sat Dec  3 03:32:19 2005

This will create a valid certificate good for 12 hours. To increase the time the certificate is valid use

[ew2193@grid ~]$grid-proxy-init -valid {hours} See grid-proxy-init -help for other options.

If your proxy certificate has expired

[ew2193@grid ~]$ source /network/rit/misc/grid/setup.csh
[ew2193@grid ~]$ openssl pkcs12 -in cert.pfx -clcerts -nokeys -out $HOME/.globus/usercert.pem
[ew2193@grid ~]$ grid-proxy-init
 Your identity: /DC=org/DC=doegrids/OU=People/CN=Eric Warnke 32390
 Enter GRID pass phrase for this identity: *******
 Creating proxy ............................................................ Done
 Your proxy is valid until: Sat Dec  3 03:32:19 2005

Confirming your proxy certificate

If you are ever curious how much longer your certificate will live you can always use the following command to find out.

[ew2193@grid ~]$ grid-proxy-info 
 subject  : /DC=org/DC=doegrids/OU=People/CN=Eric Warnke 32390/CN=192385289
 issuer   : /DC=org/DC=doegrids/OU=People/CN=Eric Warnke 32390
 identity : /DC=org/DC=doegrids/OU=People/CN=Eric Warnke 32390
 type     : Proxy draft compliant impersonation proxy
 strength : 512 bits
 path     : /tmp/x509up_u18070
 timeleft : 11:59:02

Now you are ready to run jobs on the Grid!